Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/n3lh4QDYlDCqN06DTBFbH3KjV1k.roa
File: n3lh4QDYlDCqN06DTBFbH3KjV1k.roa (raw, json)
Hash identifier: QGxQlvRQl/GQdnYhQYT7FDhoapcgM4Ujt5at2SD+Q04=
Subject key identifier: 9F:79:61:E1:00:D8:94:30:AA:37:4E:83:4C:11:5B:1F:72:A3:57:59
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FA5
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/n3lh4QDYlDCqN06DTBFbH3KjV1k.roa
Signing time: Fri 01 Sep 2023 09:37:06 +0000
ROA not before: Fri 01 Sep 2023 09:37:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 210.17.73.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4005 (0xfa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9F7961E100D89430AA374E834C115B1F72A35759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:d8:ce:7c:8a:c9:c3:09:fc:0e:f4:12:b5:
99:e8:54:07:20:90:f0:24:a1:16:a3:00:1f:b2:7b:
5d:d7:a8:d1:d8:28:41:e3:b0:fe:83:24:bc:e8:da:
c6:d1:28:8b:03:e0:1f:3c:86:b9:4b:96:56:6b:3f:
9f:5f:01:d1:93:03:be:b6:9c:19:63:07:bb:87:0e:
07:e1:4b:38:fa:cd:68:8f:33:c3:e4:c2:2c:e3:62:
58:a2:5a:df:27:d8:bb:97:8c:3b:ab:c7:e5:9a:78:
cc:fb:4b:af:7e:fa:f8:b0:ee:45:91:ec:b3:0b:a1:
3b:48:4f:67:88:24:6e:ef:87:02:74:f5:ac:c0:7f:
1a:89:0c:b3:ae:be:ae:04:98:96:21:3d:64:7f:31:
4a:91:23:5a:29:24:4f:3b:e8:30:44:fa:c8:06:d0:
4d:ab:7d:a8:86:bf:19:fa:3a:95:6f:7c:39:0a:0a:
d1:50:27:f4:b9:39:12:fb:83:39:21:cc:23:16:07:
92:52:e2:6a:cb:c5:e7:ff:50:bc:5c:6b:64:d2:7a:
be:ac:e1:d6:54:79:ba:3c:bf:cc:dc:e3:3e:c7:89:
ac:c7:97:36:af:9a:80:6a:c7:ae:02:ab:bf:79:56:
c7:99:3d:af:4e:cd:00:5a:c8:ab:d9:3f:40:7e:f2:
1e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:79:61:E1:00:D8:94:30:AA:37:4E:83:4C:11:5B:1F:72:A3:57:59
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/n3lh4QDYlDCqN06DTBFbH3KjV1k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.73.0/24
Signature Algorithm: sha256WithRSAEncryption
16:35:3b:c6:7a:a6:47:90:8d:ed:13:b4:a4:8e:0a:03:57:a2:
7e:26:13:d4:71:8d:89:5f:33:b8:0d:44:75:99:ee:cb:52:9a:
37:a2:cd:2e:05:12:95:16:01:79:93:84:24:d1:81:95:c2:09:
36:77:34:20:26:cf:a5:bd:f9:02:2e:c8:59:fa:74:b4:05:b6:
69:92:ca:82:9f:f4:cc:17:c7:e5:d3:d7:b5:5f:18:20:1d:86:
a6:3e:dc:e8:20:5f:bc:88:ff:ac:33:be:04:6c:1d:0a:59:b5:
78:07:c7:68:5c:55:21:5c:84:37:74:b3:d2:50:b4:e2:57:ee:
04:d7:bb:f8:e9:84:59:ec:84:0f:0e:05:9e:0b:d6:27:48:01:
66:fc:8f:59:b7:c1:f6:40:d7:a8:b8:45:d7:b5:e9:b3:3d:f5:
77:1e:34:4c:1e:7e:4c:fc:06:f0:6c:33:ce:bd:33:8a:d2:0f:
50:47:13:37:56:46:a0:27:46:38:8f:01:c6:57:bf:28:e9:55:
03:0c:ba:c7:1c:88:ea:4a:60:d5:98:c3:11:c7:22:ad:b9:59:
6c:78:d3:53:f6:c4:09:0d:f5:23:35:5b:20:a4:9d:8c:7b:50:
a2:73:3f:79:24:ee:d5:6e:46:0e:ce:05:f5:90:41:5b:f3:b4:
23:77:f5:93
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw
OTM3MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlGNzk2MUUxMDBEODk0
MzBBQTM3NEU4MzRDMTE1QjFGNzJBMzU3NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1udjOfIrJwwn8DvQStZnoVAcgkPAkoRajAB+ye13XqNHYKEHj
sP6DJLzo2sbRKIsD4B88hrlLllZrP59fAdGTA762nBljB7uHDgfhSzj6zWiPM8Pk
wizjYliiWt8n2LuXjDurx+WaeMz7S69++viw7kWR7LMLoTtIT2eIJG7vhwJ09azA
fxqJDLOuvq4EmJYhPWR/MUqRI1opJE876DBE+sgG0E2rfaiGvxn6OpVvfDkKCtFQ
J/S5ORL7gzkhzCMWB5JS4mrLxef/ULxca2TSer6s4dZUebo8v8zc4z7HiazHlzav
moBqx64Cq795VseZPa9OzQBayKvZP0B+8h5pAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUn3lh4QDYlDCqN06DTBFbH3KjV1kwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvbjNsaDRRRFlsRENxTjA2
RFRCRmJIM0tqVjFrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANIRSTANBgkqhkiG9w0BAQsFAAOCAQEAFjU7xnqmR5CN7RO0pI4KA1eifiYT1HGN
iV8zuA1EdZnuy1KaN6LNLgUSlRYBeZOEJNGBlcIJNnc0ICbPpb35Ai7IWfp0tAW2
aZLKgp/0zBfH5dPXtV8YIB2Gpj7c6CBfvIj/rDO+BGwdClm1eAfHaFxVIVyEN3Sz
0lC04lfuBNe7+OmEWeyEDw4FngvWJ0gBZvyPWbfB9kDXqLhF17Xpsz31dx40TB5+
TPwG8Gwzzr0zitIPUEcTN1ZGoCdGOI8Bxle/KOlVAwy6xxyI6kpg1ZjDEccirblZ
bHjTU/bECQ31IzVbIKSdjHtQonM/eSTu1W5GDs4F9ZBBW/O0I3f1kw==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org